hera-user
Patchstack Bug Bounty Program
9 kredili kayıt · son 12 ayda 9 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
21İzleyin | CVE-2026-125444İstismar yok | WordPress King Addons for Elementor plugin <= 51.1.87 - Broken Access Control vulnerabilityking addons · king addons for elementor · CWE-862 | Orta5,3 | — | %0,2 | 2 gün önce |
26İzleyin | CVE-2026-119515İstismar yok | WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.20 - Broken Access Control vulnerabilitymamunur rashid · radius booking — booking calendar for appointments & services · CWE-862 | Orta6,5 | — | %0,2 | 4 gün önce |
26İzleyin | CVE-2026-121783İstismar yok | WordPress WP Data Access plugin <= 5.5.90 - Cross Site Request Forgery (CSRF) vulnerabilitypassionate programmer peter · wp data access · CWE-352 | Orta6,5 | — | %0,1 | 6 gün önce |
21İzleyin | CVE-2026-119508İstismar yok | WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.20 - Broken Access Control vulnerabilitymamunur rashid · radius booking — booking calendar for appointments & services · CWE-862 | Orta5,3 | — | %0,2 | 6 gün önce |
17İzleyin | CVE-2026-61990İstismar yok | WordPress WCFM Membership plugin <= 2.12.0 - Broken Access Control vulnerabilitywc lovers · wcfm membership · CWE-862 | Orta4,3 | — | %0,2 | 6 gün önce |
17İzleyin | CVE-2026-122668İstismar yok | WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerabilitymycred · mycred · CWE-862 | Orta4,3 | — | %0,2 | 6 gün önce |
23İzleyin | CVE-2026-122265İstismar yok | Vanquish Upload Files for WooCommerce <= 2.7.13 - Unauthenticated Arbitrary File Read via 'vanupfi_file_name' Parametervanquish83 · vanquish upload files for woocommerce · CWE-22 | Orta5,9 | — | %0,7 | 6 gün önce |
30İzleyin | CVE-2026-56065İstismar yok | WordPress Doofinder for WooCommerce plugin <= 2.17.2 - Sensitive Data Exposure vulnerabilitydoofinder · doofinder for woocommerce · CWE-538 | Yüksek7,5 | — | %0,2 | 4 Kas 2026 |
21İzleyin | CVE-2026-62122İstismar yok | WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerabilityarraytics · booktics · CWE-862 | Orta5,3 | — | %0,2 | 30 Eki 2026 |
- CVE-2026-12544421İzleyin
WordPress King Addons for Elementor plugin <= 51.1.87 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0king addons · king addons for elementor2 gün önce
- CVE-2026-11951526İzleyin
WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.20 - Broken Access Control vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0mamunur rashid · radius booking — booking calendar for appointments & services4 gün önce
- CVE-2026-12178326İzleyin
WordPress WP Data Access plugin <= 5.5.90 - Cross Site Request Forgery (CSRF) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0passionate programmer peter · wp data access6 gün önce
- CVE-2026-11950821İzleyin
WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.20 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0mamunur rashid · radius booking — booking calendar for appointments & services6 gün önce
- CVE-2026-6199017İzleyin
WordPress WCFM Membership plugin <= 2.12.0 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0wc lovers · wcfm membership6 gün önce
- CVE-2026-12266817İzleyin
WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0mycred · mycred6 gün önce
- CVE-2026-12226523İzleyin
Vanquish Upload Files for WooCommerce <= 2.7.13 - Unauthenticated Arbitrary File Read via 'vanupfi_file_name' Parameter
OrtaCVSS 5,9İstismar yokEPSS %0vanquish83 · vanquish upload files for woocommerce6 gün önce
- CVE-2026-5606530İzleyin
WordPress Doofinder for WooCommerce plugin <= 2.17.2 - Sensitive Data Exposure vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0doofinder · doofinder for woocommerce4 Kas 2026
- CVE-2026-6212221İzleyin
WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0arraytics · booktics30 Eki 2026